Struct LsadClient 

pub struct LsadClient<'a> { /* private fields */ }

Ergonomic LSAD client. Binds the LSA interface over an already-open \lsarpc pipe, opens the policy handle lazily on the first call.

Implementations

impl<'a> LsadClient<'a>

pub async fn bind(client: &'a mut SmbClient, file_id: [u8; 16]) -> Result<Self>

Bind the LSA interface over a fresh \lsarpc pipe.

Examples found in repository

examples/enum_trusts.rs (line 43)

async fn main() -> Result<(), Box<dyn Error>> {
    let args: Vec<String> = std::env::args().collect();
    if args.len() < 5 {
        eprintln!(
            "usage: {} <host> <domain> <user> <password>",
            args.first().map(String::as_str).unwrap_or("enum_trusts")
        );
        std::process::exit(2);
    }
    let host = &args[1];
    let domain = &args[2];
    let user = &args[3];
    let password = &args[4];

    eprintln!("[+] connecting to \\\\{host}\\IPC$ as {domain}\\{user}");
    let mut smb = SmbClient::connect(host).await?;
    smb.login(host, domain, user, password).await?;
    smb.tree_connect(&format!("\\\\{host}\\IPC$")).await?;

    eprintln!("[+] opening \\PIPE\\lsarpc");
    let pipe = smb.open_pipe("lsarpc").await?;

    eprintln!("[+] binding MS-LSAD interface + LsarOpenPolicy2");
    let mut client = LsadClient::bind(&mut smb, pipe).await?;

    eprintln!("[+] calling LsarEnumerateTrustedDomains (opnum 13)");
    let trusts = client.enumerate_trusts("").await?;

    println!("=== {} trust(s) enumerated ===", trusts.len());
    for t in &trusts {
        println!("  {}  {}", t.sid, t.name);
    }

    Ok(())
}

pub async fn enumerate_trusts( &mut self, system_name: &str, ) -> Result<Vec<TrustedDomainInfo>>

Enumerate every trust in one page (loops the paging cursor internally until the server returns next_context == 0). Real-world domains have < 256 trusts; a single page is almost always sufficient.

Examples found in repository

examples/enum_trusts.rs (line 46)

async fn main() -> Result<(), Box<dyn Error>> {
    let args: Vec<String> = std::env::args().collect();
    if args.len() < 5 {
        eprintln!(
            "usage: {} <host> <domain> <user> <password>",
            args.first().map(String::as_str).unwrap_or("enum_trusts")
        );
        std::process::exit(2);
    }
    let host = &args[1];
    let domain = &args[2];
    let user = &args[3];
    let password = &args[4];

    eprintln!("[+] connecting to \\\\{host}\\IPC$ as {domain}\\{user}");
    let mut smb = SmbClient::connect(host).await?;
    smb.login(host, domain, user, password).await?;
    smb.tree_connect(&format!("\\\\{host}\\IPC$")).await?;

    eprintln!("[+] opening \\PIPE\\lsarpc");
    let pipe = smb.open_pipe("lsarpc").await?;

    eprintln!("[+] binding MS-LSAD interface + LsarOpenPolicy2");
    let mut client = LsadClient::bind(&mut smb, pipe).await?;

    eprintln!("[+] calling LsarEnumerateTrustedDomains (opnum 13)");
    let trusts = client.enumerate_trusts("").await?;

    println!("=== {} trust(s) enumerated ===", trusts.len());
    for t in &trusts {
        println!("  {}  {}", t.sid, t.name);
    }

    Ok(())
}